HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPCIPIILowContained
THE MASSACHUSETTS MEDICAL SOCIETY
bd_c0cc85ac9e9879d6 · schema v1 · pii pii-v1
Full breach record for THE MASSACHUSETTS MEDICAL SOCIETY →Massachusetts Medical Society (MMS) notified the NH AG of a security incident where unauthorized code was installed on its e-commerce checkout page between Oct 3-11, 2024. The code captured payment card and personal info entered during checkout. MMS discovered the code on Oct 11, removed it, and identified one affected NH resident. Notification was mailed on Dec 26, 2024. MMS enhanced technical safeguards.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_6afeeac98ff20369Vermont State AGfiled 2024-12-26Verified
- bd_7887a2f3ee5587b4Indiana State AGfiled 2024-12-26Verified
- bd_c2958815b180d788Maine State AGfiled 2024-12-26Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/massachusetts-medical-society-20241226.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 26, 2024
- Raw hash
- 2c626dacdf955d97441c081eab2de0ceb014ad1400bf1ffe9d66cb1569d6c56e
Reporting entity
- Name
- THE MASSACHUSETTS MEDICAL SOCIETYnorm: the massachusetts medical society
Victim entity
- Name
- THE MASSACHUSETTS MEDICAL SOCIETYnorm: the massachusetts medical society
Incident
- Discovered
- Oct 11, 2024
- Materiality determined
- Nov 13, 2024
- Notification sent
- Dec 26, 2024
- Affected individuals
- 1
- Data types
- PCIPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input CaptureT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(76 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.